Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199614.roa
File: AS199614.roa (raw, json)
Hash identifier: DB5dRxrQP41/qUOOcp1fvQnpQP/2gwlxSjRZ2f2GZvE=
Subject key identifier: 18:A9:A1:70:85:3E:40:55:E7:52:B7:7E:61:5E:70:FE:1F:BE:05:A0
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2722599ADFEF5C44B92491F89B6531E3C2A11BB8
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199614.roa
Signing time: Sat 17 Oct 2026 02:49:37 +0000
ROA not before: Sat 17 Oct 2026 02:44:37 +0000
ROA not after: Sat 16 Oct 2027 02:49:37 +0000
asID: 199614
IP address blocks: 82.38.16.0/24 maxlen: 24
82.38.45.0/24 maxlen: 24
82.38.106.0/24 maxlen: 24
82.38.110.0/24 maxlen: 24
82.38.123.0/24 maxlen: 24
82.38.208.0/24 maxlen: 24
82.38.209.0/24 maxlen: 24
82.38.213.0/24 maxlen: 24
82.38.214.0/24 maxlen: 24
82.39.82.0/24 maxlen: 24
82.39.83.0/24 maxlen: 24
82.39.84.0/24 maxlen: 24
82.39.85.0/24 maxlen: 24
82.39.87.0/24 maxlen: 24
82.39.88.0/24 maxlen: 24
82.39.89.0/24 maxlen: 24
82.39.90.0/24 maxlen: 24
82.39.91.0/24 maxlen: 24
82.39.92.0/24 maxlen: 24
82.39.100.0/24 maxlen: 24
82.39.104.0/24 maxlen: 24
82.39.106.0/24 maxlen: 24
82.39.167.0/24 maxlen: 24
82.39.191.0/24 maxlen: 24
82.39.192.0/24 maxlen: 24
82.41.1.0/24 maxlen: 24
82.41.5.0/24 maxlen: 24
82.41.6.0/24 maxlen: 24
82.41.7.0/24 maxlen: 24
82.41.8.0/24 maxlen: 24
82.41.9.0/24 maxlen: 24
82.41.10.0/24 maxlen: 24
82.41.11.0/24 maxlen: 24
82.41.12.0/24 maxlen: 24
82.41.14.0/24 maxlen: 24
82.41.15.0/24 maxlen: 24
82.41.22.0/24 maxlen: 24
82.41.23.0/24 maxlen: 24
82.41.24.0/24 maxlen: 24
82.41.25.0/24 maxlen: 24
82.41.28.0/24 maxlen: 24
82.41.29.0/24 maxlen: 24
82.41.32.0/24 maxlen: 24
82.41.33.0/24 maxlen: 24
82.41.38.0/24 maxlen: 24
82.41.39.0/24 maxlen: 24
82.41.48.0/24 maxlen: 24
82.41.49.0/24 maxlen: 24
82.41.96.0/24 maxlen: 24
82.41.116.0/24 maxlen: 24
82.41.123.0/24 maxlen: 24
82.41.146.0/24 maxlen: 24
82.41.157.0/24 maxlen: 24
82.41.169.0/24 maxlen: 24
82.41.182.0/24 maxlen: 24
82.41.199.0/24 maxlen: 24
82.41.209.0/24 maxlen: 24
82.41.220.0/24 maxlen: 24
82.41.239.0/24 maxlen: 24
82.41.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:22:59:9a:df:ef:5c:44:b9:24:91:f8:9b:65:31:e3:c2:a1:1b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 17 02:44:37 2026 GMT
Not After : Oct 16 02:49:37 2027 GMT
Subject: CN=18A9A170853E4055E752B77E615E70FE1FBE05A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:41:c3:3b:47:2d:e1:37:26:4a:96:7e:ca:db:
28:20:05:5a:96:c9:a8:fb:2e:a8:6e:3c:32:f2:ad:
75:ac:10:6d:04:4a:1a:06:6f:97:e4:de:21:92:da:
c6:00:bf:51:21:96:64:5c:f5:ef:78:94:a6:5a:26:
92:be:30:7a:ec:c1:eb:fb:a7:fe:46:2d:bc:97:05:
d6:ee:19:30:18:06:5c:7f:b2:8e:ce:9d:0e:65:24:
44:96:3b:90:94:b5:62:e9:4e:24:7a:2b:05:6d:95:
3b:36:37:d2:4a:82:d9:5e:6b:4f:7d:57:1d:48:56:
a1:18:f1:63:4e:6f:31:92:29:06:ae:96:0a:64:5b:
12:dd:7d:3b:cd:e5:e5:ef:fa:c6:ba:26:86:c6:4f:
f2:6e:1f:8b:ad:00:3a:01:ab:62:8c:82:57:da:96:
f4:18:93:d9:6d:06:f7:90:a9:85:f6:ce:cf:22:a5:
8a:56:69:7b:94:bf:f4:78:14:7b:45:fa:73:8c:1d:
ab:fa:31:5c:a5:54:6b:46:b4:79:42:f9:89:93:8e:
d7:f6:7f:03:4d:9a:9a:38:dc:8f:7c:07:8a:8b:f0:
1d:a1:84:ce:9f:dc:b0:98:08:65:c8:12:83:2b:19:
ba:02:c0:c6:b8:1a:f2:9b:85:ce:b4:8c:ad:df:f2:
32:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A9:A1:70:85:3E:40:55:E7:52:B7:7E:61:5E:70:FE:1F:BE:05:A0
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199614.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.16.0/24
82.38.45.0/24
82.38.106.0/24
82.38.110.0/24
82.38.123.0/24
82.38.208.0/23
82.38.213.0-82.38.214.255
82.39.82.0-82.39.85.255
82.39.87.0-82.39.92.255
82.39.100.0/24
82.39.104.0/24
82.39.106.0/24
82.39.167.0/24
82.39.191.0-82.39.192.255
82.41.1.0/24
82.41.5.0-82.41.12.255
82.41.14.0/23
82.41.22.0-82.41.25.255
82.41.28.0/23
82.41.32.0/23
82.41.38.0/23
82.41.48.0/23
82.41.96.0/24
82.41.116.0/24
82.41.123.0/24
82.41.146.0/24
82.41.157.0/24
82.41.169.0/24
82.41.182.0/24
82.41.199.0/24
82.41.209.0/24
82.41.220.0/24
82.41.239.0-82.41.240.255
Signature Algorithm: sha256WithRSAEncryption
8e:6a:94:c3:2f:eb:e1:b2:57:03:cc:64:92:f8:ad:37:d5:e8:
cf:ae:22:98:3f:98:99:92:77:e6:01:c7:5d:98:3d:f0:95:08:
e2:cb:05:82:d0:fd:96:82:93:d4:0f:ba:46:99:f5:cd:71:7c:
16:6c:f5:93:de:76:5d:07:af:ed:6e:36:79:b4:52:1a:ea:37:
48:f7:31:4b:4b:fe:94:6b:0d:a1:99:5e:bc:a5:f3:d0:6b:a6:
ad:33:af:61:dd:70:e8:33:4e:1d:43:05:65:75:36:f8:fb:f0:
26:e4:8e:3a:e5:64:b4:76:08:fe:bb:ed:28:4f:70:00:1d:92:
41:91:a1:a8:43:1d:13:c2:d7:11:0f:07:2c:9c:90:68:59:35:
53:9d:4c:79:71:0a:eb:35:ea:0a:ed:69:a4:13:ea:0c:86:5b:
42:0a:8b:13:04:73:84:80:5a:bc:66:e6:60:86:99:e7:d3:83:
1b:87:69:1a:44:56:5b:db:2f:15:66:5f:60:38:3b:68:ad:9d:
9f:23:d3:c1:de:07:8b:f9:a0:fd:ae:70:cc:39:f9:03:52:09:
8d:4b:30:a4:b7:3a:21:22:61:21:49:34:4d:78:c8:e5:2b:2f:
9f:af:96:2e:71:48:10:48:19:3f:4e:fc:86:a7:60:6e:dc:ac:
66:94:38:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:43:25 2026 by rpki-client